体面的面包店建筑？

Question

体面的面包店建筑？

- 14
- 221 2019-01-29
当前正在建立一家面包店,并牢记以下架构.

在两个不同的云上的四个不同的数据中心上运行的四个公共节点

以私有模式运行的两个节点仅连接到四个公共节点,也都在云中

在其中一个专用节点上运行的贝克,背书人和原告,在另一个上的"热备用"上运行同一堆栈

两个面包师都使用相同的远程tezos-signer

在本地笔记本电脑(由于电池)上运行的tezos-signer守护程序,带有一台账本和两个Internet连接(光纤+ 4G)

通过SDN/VPN连接的所有节点

社区对此设置有何看法?听起来像中型面包店的体面HA设置?有毛病吗?过度杀伤力?

反馈非常感谢
Currently setting up a bakery and have the following architecture in mind.

Four public nodes running on four different datacenters on two different clouds

Two nodes running in private mode connected only to the four public nodes, also in the cloud

Baker, endorser and accuser running on 1 of the private nodes and the same stack on "hot standby" on the other

Both bakers using the same remote tezos-signer

A tezos-signer daemon running on a local laptop (because battery) with a ledger and two internet connections (fiber + 4G)

All nodes connected via a SDN/VPN

What does the community think about this setup? Sounds like a decent HA setup for a medium sized bakery? Any glitches? Overkill?

Feedback much appreciated
ledger architecture private-mode setup bakery

- 嗨,asbjornenge！这里的人们将很乐意为您解决问题,但是对审核的要求过于广泛,提出的问题多于答案.人们只能提供各种意见,您以后可以使用这些意见,但是Stack Exchange旨在询问非常具体的,已应用的问题,例如您在此版本中遇到的问题.您可能会问某个特定组件是否符合Tezos的某些(例如)；但是就目前而言,该问题将作为对社区的民意测验而结束-不太适合此类问答网站.
  
  Hi, asbjornenge! The folks here will be eager to help you with your issue, but an overly broad request for review raises more questions than answers. Folks can only offer various opinions which you may be able to pick through later, but Stack Exchange is designed to ask very specific, applied questions like the problem you encountered in this build. You might ask if a specific component meets some of Tezos (for example); but as this stands, this question is about to be closed as a poll of the community — not really a good fit for this type of Q&A site.
  - 1
  - 2019-01-29
  - Robert Cartaino
- @RobertCartaino指出.从现在开始,我将尽力让我的问题更具体
  
  @RobertCartaino Noted. I'll try to keep my questions more specific from now on
  - 1
  - 2019-01-29
  - asbjornenge
- @asbjornenge您认为"中型"是什么,为什么?如果具有1卷或500卷,那么具有如此复杂的拓扑结构,您会获得什么好处?
  
  @asbjornenge What do you consider "medium sized" and why? What are you gaining by having such a complex topology if you have 1 roll or 500 rolls?
  - 1
  - 2019-02-01
  - utdrmac
- @utdrmac我认为是一个中型面包师,持有100k至500k XTZ.如果我们拥有100万个XTZ,则设置会更加复杂.通过这种设置,我可以获得高可用性-确保不会错过烘烤槽,并具有双重烘烤保护功能-确保我们不会受到损失.因此,我确保未来几年我们面包店的统计数据良好.还可以省心我拥有HA建筑师背景可能对您没有帮助
  
  @utdrmac I consider a medium sized baker one that holds between 100k to 500k XTZ. If we held 1 million XTZ the setup would be more sophisticated. From this setup I gain high availability - ensuring that I won't miss a baking slot, and double bake protection - ensuring we don't get penalized. So I ensure good stats for our bakery in the years to come. Also peace of mind It probably does not help that I have a HA architect background
  - 1
  - 2019-02-03
  - asbjornenge
- 如果您拥有100万个XTZ或1万个XTZ,为什么会如此?您仍然只需要1个节点即可烘烤/认可/指责.由于面包师可以在任一台VM上运行,因此这感觉极其复杂,并且"增加"了两次烘烤的可能性.如何防止两个面包师同时运行?
  
  Why does it matter if you held 1 million XTZ or 10k? You still only need 1 node to bake/endorse/accuse. This feels incredibly overcomplicated and "increases" the likelyhood of double baking since the baker could run on either VM. How do you prevent two bakers from running at the same time?
  - 1
  - 2019-02-05
  - utdrmac
- @utdrmac拥有的XTZ越多,烘烤的面包卷就越多,可以进行的委派越多.因此,保持在线状态(高可用性)很重要.单个公共节点可能会受到DDOS攻击,并由于其他原因而失败,这将导致错过烘烤机会.我建议的体系结构使用1个使用分类帐的单一签名守护程序.分类帐具有双重烘烤保护,这意味着即使多个面包师试图在同一块上签名,它也不会对同一块进行两次签名.
  
  @utdrmac the more XTZ you hold the more rolls you get to bake and the more delegations you can take. Thus it's important to stay online (high availability). A single public node can be DDOS attacked and fail for other reasons which will cause missed baking opportunities. My suggested architecture uses 1 single signing daemon that uses a ledger. The ledger has double-bake protection which means it will not sign the same block twice even if multiple bakers try to sign the same block.
  - 0
  - 2019-02-05
  - asbjornenge

1 个回答

投票数

Andreas Tissen · Answer 1 · 2019-01-29

7

2019-01-29

看起来像一个好的开始.

除非您的(4G)路由器有电池,否则请考虑不间断电源(UPS).

如果第二台笔记本电脑带有签名者和额外的分类帐,并且可以在附近的单独位置待命,则可以在硬件问题,火灾/水灾或长时间停电的情况下改善HA.

可能更重要的是您的软件设置.节点/贝克/签名者软件是否作为服务运行,因此在重新启动的情况下会再次启动?这是执行此操作的绝佳指南: https://github.com/etomknudsen/tezos-baking

以下是由Obsidian Systems提供的有关面包师安全性的一般指南: https://link.medium.com/ckapz7MOST

感谢您的出色反馈！我将使用内置4G的笔记本电脑,因此那里没有电池问题.它可以与多个签名者/分类账一起使用吗?我在两个分类帐上都不需要相同的帐户/私钥吗?另外,多个分类帐可能不会为我提供双重烘烤保护吗? 软件堆栈是全部基于docker的软件,可在集群中运行,并自动重启,监控和警报等.

Thanks for excellent feedback! I'm going to use a laptop with 4G builtin so no battery issues there. Will it work with multiple signer / ledgers? Would I not need the same account / privkeys on both ledgers? Also multiple ledgers would probably not give me double bake protection? Software stack is all docker based running in a swarm and auto restarting, monitoring and alerts etc.
- 2
- 2019-01-29
- asbjornenge
您可以使第二台笔记本电脑的签名者和分类帐保持脱机状态.万一您的第一个系统出现故障,您可以手动激活第二个.因此,它应该在附近.是的,您在两个分类帐上都需要相同的私钥.您可以克隆您的分类帐.

You can keep the second laptop with the signer and ledger offline. Just in case your first system breaks down you would manually activate the second. Hence it should be in a close by location. Yes, you'd need the same private key on both ledgers. You can clone your ledger.
- 1
- 2019-01-30
- Andreas Tissen